Denial Of Service (DoS)

org.springframework,spring-web is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of ETags from If-Match or If-None-Match request headers, allowing attackers to overwhelm the system and cause service disruption...

Mattermost 安全漏洞

Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...

Tenda wireless access point fromVirtualSet function Heap Buffer Overflow DoS

The vulnerability of the fromVirtualSet function in the /goform/setPortForward function of the Tenda wireless access point’s microprogramming system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to...

Tenda wireless access point formSetCfm Code Execution

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming system for the wireless access point Tenda is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause...

Tenda wireless access point fromDhcpSetSer Heap Buffer Overflow DoS

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer microprogramming system for the Tenda wireless access point is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or...

Linux kernel NFC Memory Leak DoS

The vulnerability of the NFC component in the Linux operating system’s kernel relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

HCI_AMP Component Linux DoS

The vulnerability of the HCIAMP component in the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft SQL Server Numerical Truncation Unauthorized Access

The vulnerability of the Microsoft SQL Server database management system is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

WebKitGTK WebKit Heap Buffer Overflow DoS

The vulnerability of the Web page rendering module in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

SoX formats_i.c Heap Buffer Overflow DoS

The vulnerability of the lsxreadwbuf function in the formsi.c component of the SoX sound processing program is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created file...

WPE WebKit WebKitGTK Buffer Overflow DoS

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Vim did_set_spelllang Use-After-Free

The vulnerability of the didsetspelllang function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

Vim alloc.c Heap Buffer Overflow DoS

The vulnerability in the alloc.c component of the Vim text editor relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

WebKitGTK WebKit Heap Buffer Overflow DoS

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

SoX read_samples() Component DoS

The vulnerability of the readsamples function in the SoX sound processing component voc.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

WebGL 3D Graphics Access Confidential Data Compromise Service Failures

The vulnerability of the WebGL 3D graphics application programming interface in Firefox, Firefox ESR, and Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

CURL Memory Use After Free DoS

The vulnerability of the software for interacting with servers via CURL is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Microsoft Edge Google Chrome Confidential Data Compromise

The vulnerability of the subtitle rendering components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Git split_cmdline Heap Buffer Overflow DoS

The vulnerability of the splitcmdline function in the distributed version of Git’s version control system is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause...

DPDK fast packet processing Heap Buffer Overflow DoS

The vulnerability of the vhostusersetinflightfd function in the set of libraries and drivers for the DPDK fast packet processing framework is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...